Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
File: hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft (raw, json)
Hash identifier: Dq8uEf6tm3A8rZg6if/xTY9hNMXG6n/AdNNWOnkTSZc=
Subject key identifier: 10:96:DE:34:99:2B:D2:78:39:44:C5:71:7A:C1:25:12:C1:18:11:F8
Authority key identifier: 86:4D:2F:0C:46:75:2B:F0:69:73:8F:BA:67:EF:E2:F6:B8:B6:2C:C4
Certificate issuer: /CN=864d2f0c46752bf069738fba67efe2f6b8b62cc4
Certificate serial: 019D378946DC5F88C925649B38A88DC6039F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
Manifest number: 0112
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: R9NGLutQdVO4LXCQi00sG9rliWM.roa (hash: +uY9BE883q1EK9ehNx5rRzDlM1yOOZRz+kA9g1qIqVk=)
2: hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl (hash: Gq8BKK6PLFPLYgY5ZNZURWe3rdr+UZZnKDNzU2JPNSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:46:dc:5f:88:c9:25:64:9b:38:a8:8d:c6:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864d2f0c46752bf069738fba67efe2f6b8b62cc4
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=1096de34992bd2783944c5717ac12512c11811f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:96:ab:6c:f8:19:dc:60:d4:f8:6c:83:79:
bd:38:f6:8b:5d:8e:b8:64:2c:df:ea:0e:f8:aa:f5:
f6:c6:64:8f:a1:b7:03:11:0d:8f:b9:ca:78:b4:00:
39:33:70:c5:cf:2e:40:df:f6:0d:c2:36:43:47:99:
2b:10:45:ab:9c:8b:07:8c:65:42:85:52:ac:f7:2d:
76:89:74:11:8c:2b:bf:73:1d:1b:23:e2:08:be:f4:
e0:bf:0f:c2:43:c6:2b:8f:9a:e3:1c:a4:e0:94:f9:
f4:f3:c4:67:a0:e3:52:fb:59:c2:95:fa:8b:7e:31:
2e:11:1c:98:8f:cb:a2:0b:cc:28:04:27:a0:c0:3f:
41:b6:88:7c:14:9c:62:1e:08:74:92:d7:7a:48:72:
c9:0a:83:4a:c7:13:0e:29:75:7c:ec:1c:a2:4d:04:
0f:f0:f1:68:26:85:bd:50:98:79:b7:21:43:23:53:
d9:3c:ba:11:73:cf:d1:35:00:0c:4a:c2:31:77:9d:
1c:63:2b:53:aa:1a:dc:0e:c9:f9:4a:54:18:15:7f:
65:95:3e:95:2c:ae:38:4c:9d:a5:98:b4:67:3c:fe:
a6:95:18:d5:c1:ed:fd:19:c9:78:3c:92:60:d5:5c:
31:5a:05:ee:74:0f:dc:aa:a7:64:ff:36:f3:ad:65:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:96:DE:34:99:2B:D2:78:39:44:C5:71:7A:C1:25:12:C1:18:11:F8
X509v3 Authority Key Identifier:
keyid:86:4D:2F:0C:46:75:2B:F0:69:73:8F:BA:67:EF:E2:F6:B8:B6:2C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e2d6c-1481-4844-a7ee-1fa540b721c2/1/hk0vDEZ1K_Bpc4-6Z-_i9ri2LMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:62:61:f8:08:9e:d2:23:cf:ed:19:23:1b:9b:fd:6a:96:b6:
71:7e:b1:ac:44:20:65:d3:ea:4f:cd:7f:b5:4b:ed:cf:86:f8:
a5:f4:b0:6a:ce:99:78:ef:c3:2d:4f:7b:b7:6e:27:ea:46:6b:
7c:61:38:07:7f:f3:df:38:55:9a:f7:f1:ae:ef:45:3e:85:36:
f2:63:b6:2b:b6:e0:06:b0:9b:8b:d3:ac:25:32:58:ef:7c:cd:
f3:3a:5c:b0:07:ea:88:09:01:05:a8:fa:71:5f:24:f1:18:3a:
7d:0d:86:aa:41:7c:d9:55:db:5c:b5:1b:ab:9d:0a:20:0f:f5:
23:47:e5:41:c0:5e:2b:d6:a0:72:60:9d:c5:36:c0:5c:83:39:
b1:8d:99:12:5d:e6:43:ec:8c:59:91:b8:bc:39:44:91:e8:21:
cd:8b:fd:27:c1:af:65:bc:e6:41:01:6b:b5:4d:af:7f:4b:2a:
27:f3:a0:86:f2:d9:ca:c7:9d:9a:47:3d:15:de:8a:f8:5b:13:
4b:1b:03:02:bb:5c:17:62:0d:47:6d:fe:d4:5a:70:db:25:f6:
d4:81:3e:64:bd:12:58:a3:e9:22:fb:9c:ee:e6:ef:dd:52:e9:
1b:ed:01:4a:39:4e:32:1a:5f:5e:1e:99:16:e3:6e:74:6e:38:
c1:e3:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:45 2026 by rpki-client